Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,359

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,218

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1561–1590 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-67997	critical	9.8/10	WordPress Travelicious theme < 1.6.7 - PHP Object Injection vulnerability	Feb 20, 2026 6mo ago
CVE-2025-67996	critical	9.8/10	WordPress Nestin theme < 1.2.6 - PHP Object Injection vulnerability	Feb 20, 2026 6mo ago
CVE-2025-67995	critical	9.8/10	WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability	Feb 20, 2026 6mo ago
CVE-2026-26990	high	8.8/10	LibreNMS has Time-Based Blind SQL Injection in address-search.inc.php	Feb 20, 2026 6mo ago
CVE-2026-26988	critical	9.3/10	LibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream	Feb 20, 2026 6mo ago
CVE-2026-26059	low	2.1/10	ChurchCRM has Stored Cross-Site Scripting (XSS) in GroupEditor.php	Feb 19, 2026 6mo ago
CVE-2026-25316	high	7.2/10	WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerability	Feb 19, 2026 6mo ago
CVE-2026-23549	critical	9.8/10	WordPress WpEvently plugin <= 5.1.1 - PHP Object Injection vulnerability	Feb 19, 2026 6mo ago
CVE-2026-23544	high	8.8/10	WordPress Valenti theme <= 5.6.3.5 - PHP Object Injection vulnerability	Feb 19, 2026 6mo ago
CVE-2026-23542	critical	9.8/10	WordPress Grand Restaurant theme <= 7.0.10 - PHP Object Injection vulnerability	Feb 19, 2026 6mo ago
CVE-2026-2706	medium	5.3/10	code-projects Patient Record Management System fecalysis_not.php sql injection	Feb 19, 2026 6mo ago
CVE-2026-2691	medium	6.9/10	itsourcecode Event Management System manage_register.php sql injection	Feb 19, 2026 6mo ago
CVE-2026-2690	medium	6.9/10	itsourcecode Event Management System Admin Login ajax.php sql injection	Feb 19, 2026 6mo ago
CVE-2026-2689	medium	6.9/10	itsourcecode Event Management System manage_booking.php sql injection	Feb 19, 2026 6mo ago
CVE-2026-27176	medium	5.1/10	MajorDoMo Reflected Cross-Site Scripting in command.php	Feb 18, 2026 6mo ago
CVE-2026-27175	critical	9.2/10	MajorDoMo Command Injection in rc/index.php via Race Condition	Feb 18, 2026 6mo ago
CVE-2026-1426	high	8.8/10	Advanced AJAX Product Filters <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer Compatibility	Feb 18, 2026 6mo ago
CVE-2026-1582	low	3.7/10	WP All Export <= 1.4.14 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling	Feb 18, 2026 6mo ago
CVE-2026-2560	medium	5.3/10	kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection	Feb 16, 2026 6mo ago
CVE-2026-2553	medium	5.3/10	tushar-2223 Hotel-Management-System HTTP POST Request home.php sql injection	Feb 16, 2026 6mo ago
CVE-2026-2552	medium	5.1/10	ZenTao Editor control.php delete path traversal	Feb 16, 2026 6mo ago
CVE-2026-2551	medium	5.3/10	ZenTao Backup control.php delete path traversal	Feb 16, 2026 6mo ago
CVE-2026-2543	medium	5.1/10	vichan-devel vichan Password Change pages.php unverified password change	Feb 16, 2026 6mo ago
CVE-2026-2533	medium	6.9/10	Tosei Self-service Washing Machine tosei_datasend.php command injection	Feb 16, 2026 6mo ago
CVE-2019-25377	medium	4.8/10	OPNsense 19.1 Reflected XSS via system_advanced_sysctl.php	Feb 15, 2026 6mo ago
CVE-2019-25374	medium	5.1/10	OPNsense 19.1 Reflected XSS via vpn_ipsec_settings.php	Feb 15, 2026 6mo ago
CVE-2019-25373	medium	5.1/10	OPNsense 19.1 Stored XSS via firewall_rules_edit.php	Feb 15, 2026 6mo ago
CVE-2019-25372	medium	5.1/10	OPNsense 19.1 Reflected XSS via diag_traceroute.php	Feb 15, 2026 6mo ago
CVE-2019-25371	medium	5.1/10	OPNsense 19.1 Reflected XSS via diag_ping.php	Feb 15, 2026 6mo ago
CVE-2019-25370	medium	5.1/10	OPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php	Feb 15, 2026 6mo ago